CVE-2022-50561

CVE-2022-50561 дисcusses a memory-leak issue in the Linux kernel’s IIO subsystem. The vulnerability occurs in iio_device_register_eventset() when iio_device_register_sysfs_group() fails and the eventset attrs array is not freed, allowing kmemleak to report a memory leak. The root cause is imprope...

libyal:libfsntfs_volume_fuzzer: Heap-buffer-overflow in libfsntfs_index_value_read

Detailed Report: https://oss-fuzz.com/testcase?key=4979273434988544 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfsntfsvolumefuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7921ee5e0839 Crash State:...

CVE-2025-22167: Improper Limitation of a Pathname to a Restricted Directory

This High severity Path Traversal Arbitrary Write vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server. This Path Traversal Arbitrary Write vulnerability, with a CVSS Score of 8.7, allows an attacker to modify any filesystem...

CVE-2023-53695: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF filesystem is corrupted, hidden system inodes can be linked into directory hierarchy which is an avenue for further serious corruption of the filesystem and kerne...

USN-7819-2 linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - Ext4 file system; -...

CVE-2025-53070

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successf...

CVE-2025-53070

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successf...

EUVD-2025-35264

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successf...

Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024141 fixes several issues. The following security issues were fixed: CVE-2025-38678: netfilter: nftables: reject duplicate device on updates bsc1249534. CVE-2025-38499: cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns...

EUVD-2022-54865

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to clear dirty inode in f2fsevictinode As Yanming reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=215904 The kernel message is shown below: kernel BUG at fs/f2fs/inode.c:825! Call Trace: evict+0x282/0x4...

EUVD-2022-55006

In the Linux kernel, the following vulnerability has been resolved: dax: make sure inodes are flushed before destroy cache A bug can be triggered by following command $ modprobe ndpmem && modprobe -r ndpmem 10.060014 BUG daxcache Not tainted: Objects remaining in daxcache on kmemcacheshutdown...

CVE-2025-53070: Privilege Defined With Unsafe Actions

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successf...

PT-2025-46755

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ext4 filesystem implementation within the Linux kernel. Specifically, the parse apply sb mount options function may experience a buffer over-read due to insufficient...

PT-2025-42967

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description An easily exploitable issue exists in the Filesystem component of Oracle Solaris that allows a high-privileged attacker with logon access to compromise the system. Successful attacks require human...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987666 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix race between searching chunks and release journalhead from bufferhead Encountered a ra...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987587)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987587 advisory. In the Linux kernel, the following vulnerability has been resolved: ovl: fix warning in ovlcreatereal Syzbot triggered the following warning in ovlworkdircreate -...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987619)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987619 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: dlmfs: fix error handling of userdlmdestroylock When userdlmdestroylock failed, it didn't...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987647)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987647 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix abort logic in btrfsreplacefileextents Error injection testing uncovered a case where...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987694 advisory. In the Linux kernel, the following vulnerability has been resolved: driver core: Fix waitfordeviceprobe & deferredprobetimeout interaction Mounting NFS rootfs was...

SUSE SLES15 Security Update : kernel (SUSE-SU-2025:03628-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03628-1 advisory. The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: ...